Container Image Supply Chain Security Framework Based on Blockchain and Dynamic Analysis

The widespread application of container technology has made it the core support of the cloud-native ecosystem, but image supply chain attacks and runtime security threats have seriously restricted its development. In view of the shortcomings of traditional solutions in supply chain trust verification, unknown threat detection, and policy execution efficiency, this paper proposes a container security framework based on blockchain and dynamic analysis. By recording the full life cycle data of the image on the blockchain, combined with layered hashing and lightweight Merkle tree optimization, 100% supply chain tampering detection and low-latency traceability are achieved; $e$ BPF real-time monitoring and LSTM behavior modeling mechanisms are designed to improve the detection rate of unknown attacks, such as container escape, reaching 99.5%; the integrated policy engine and gVisor sandbox enforce the isolation of high-risk containers, and the system call interception rate achieves 100%.